BugRater
Early access. This site has moved to bugrater.com.

Security releases

ImageMagick

ImageMagick Security Releases - October 2026

imagemagick-2026-10 Oct 1, 2026 Source: Vendor

ImageMagick security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-105081
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

32 lines
All 32 CVEs 32 Additional recognition 0 Unclaimed only
Showing 1–32 of 32
CVE-2026-105081 BR2026-0000-027032 ImageMagick unclaimed
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to b...
Credited as Scott Moore - VulnCheck
CVE-2026-109258 BR2026-0000-027171 ImageMagick unclaimed
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed...
Credited as w226688
CVE-2026-109259 BR2026-0000-027172 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for pro...
Credited as w226688
CVE-2026-109260 BR2026-0000-027173 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedl...
Credited as manus-pi
CVE-2026-109261 BR2026-0000-027174 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can ...
Credited as manus-pi
CVE-2026-109262 BR2026-0000-027175 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can sup...
Credited as manus-pi
CVE-2026-109263 BR2026-0000-027176 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted...
Credited as manus-pi
CVE-2026-109264 BR2026-0000-027177 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMa...
Credited as manus-pi
CVE-2026-109265 BR2026-0000-027178 ImageMagick unclaimed
ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attacke...
Credited as manus-pi
CVE-2026-109266 BR2026-0000-027179 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML ou...
Credited as manus-pi
CVE-2026-109267 BR2026-0000-027180 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of cra...
Credited as Kushalkhemka
CVE-2026-109267 BR2026-0000-027181 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of cra...
Credited as opensec-intelligence
CVE-2026-109267 BR2026-0000-027182 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of cra...
Credited as mayank-jangid-moon
CVE-2026-109267 BR2026-0000-027183 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of cra...
Credited as skigeek16
CVE-2026-109268 BR2026-0000-027184 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMY...
Credited as Yanhaoxi
CVE-2026-109269 BR2026-0000-027185 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling craf...
Credited as Yanhaoxi
CVE-2026-109270 BR2026-0000-027186 ImageMagick unclaimed
ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can re...
Credited as manus-pi
CVE-2026-109271 BR2026-0000-027187 ImageMagick unclaimed
ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted i...
Credited as Yanhaoxi
CVE-2026-109272 BR2026-0000-027188 ImageMagick unclaimed
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file f...
Credited as Yanhaoxi
CVE-2026-109273 BR2026-0000-027189 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. A...
Credited as Yanhaoxi
CVE-2026-109274 BR2026-0000-027190 ImageMagick unclaimed
ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can sw...
Credited as rexpository
CVE-2026-109275 BR2026-0000-027191 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, whe...
Credited as rexpository
CVE-2026-109276 BR2026-0000-027192 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit ...
Credited as Yanhaoxi
CVE-2026-109277 BR2026-0000-027193 ImageMagick unclaimed
ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file ...
Credited as rexpository
CVE-2026-109278 BR2026-0000-027194 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. At...
Credited as Yanhaoxi
CVE-2026-109279 BR2026-0000-027195 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a ...
Credited as Yanhaoxi
CVE-2026-109280 BR2026-0000-027196 ImageMagick unclaimed
ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply craft...
Credited as Yanhaoxi
CVE-2026-109281 BR2026-0000-027197 ImageMagick unclaimed
ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specifi...
Credited as Yanhaoxi
CVE-2026-109282 BR2026-0000-027198 ImageMagick unclaimed
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writi...
Credited as Yanhaoxi
CVE-2026-109964 BR2026-0000-028344 ImageMagick unclaimed
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply...
Credited as idoprog
CVE-2026-108693 BR2026-0000-030001 ImageMagick unclaimed
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregister...
Credited as Muhammad Ali
CVE-2026-108693 BR2026-0000-030002 ImageMagick unclaimed
ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregister...
Credited as Hasan Anwar